There is a new phishing scheme targeting MetaMask users on Apple devices. You’ll get a phone call with a legit-looking Apple caller ID. The caller will ask you to call them back so that you “know” the call is real (which it isn’t), at which point the scammer will ask you for a code that is being sent to your phone. That’s it; your MetaMask wallet is now drained because a hot (online-only) MetaMask wallet stores your seed phrase in your iCloud account.
First fix: don’t fall for it. Most important fix: always use MetaMask in combination with a cold (hardware) wallet. My favorites are Grid+ Lattice, Trezor, and Ledger. You can learn more on our blockchain resource page.
Author’s note: This is not a sponsored post. I am the author of this article and it expresses my own opinions. I am not, nor is my company, receiving compensation for it.